Privacy Policy

Version 2026-04-06 — Effective 2026-04-06

1. Who We Are

DownStream Tech ("we", "us") is a software solutions company based in the Philippines. This policy explains how we collect, use, and protect personal data submitted through downstreamtech.net.

2. Data We Collect

When you submit the contact form, we collect:

Organization name — to identify your inquiry
Email address — to respond to your inquiry and send a confirmation
Phone number — for optional follow-up contact
Message content — the details of your inquiry
IP address & user agent — for rate-limiting and security logging
Consent timestamp & policy version — proof of your agreement

We do not use cookies, tracking pixels, analytics scripts, or any third-party tracking services on this website.

3. How We Use Your Data

To respond to your inquiry within 1–2 business days
To send you an automated confirmation email
To prevent abuse via rate limiting and honeypot protections
To maintain internal activity logs for security and operational purposes

4. Legal Basis

We process your data based on your explicit consent, given when you check the consent box and submit the contact form. You may withdraw consent at any time by contacting us.

5. Data Retention

Contact submissions and activity logs: retained for 12 months, then automatically purged
Rate-limit data (hashed IP/email): temporary, automatically expires within minutes

6. Data Sharing

We do not sell, share, or transfer your data to any third party, except:

Email delivery — your inquiry is sent via SMTP (Gmail). Google's privacy policy applies to email transport only.

7. Your Rights

Under applicable data protection laws (including the Philippine Data Privacy Act of 2012), you have the right to:

Access — request a copy of your personal data we hold
Rectification — correct inaccurate data
Erasure — request deletion of your data
Portability — receive your data in a structured format
Withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Security

We protect your data with:

HTTPS encryption in transit
Content Security Policy (CSP) with per-request nonces
Rate limiting and anti-bot measures
Read-only container filesystem with minimal attack surface
Structured, append-only activity logging

9. Changes to This Policy

When we materially change this policy, we will update the version number and effective date. If you previously gave consent under an older version, you will be asked to re-consent.

10. Contact

For privacy inquiries, contact:
DownStream Tech
Email: [email protected]
Phone: +639177927953